Privacy Policy

1. Introduction

OFM Group ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including the OFM Group application.

This policy applies to all users of our talent management services and related applications.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, and business details
• Content Data: Video files, metadata, descriptions, and related content you upload
• Communication Data: Messages, feedback, and support requests

2.2 TikTok Integration Data

When you connect your TikTok account via OFM Group, we collect:

• Basic Profile Information (via user.info.basic API):
  • TikTok username and display name
  • Profile picture and bio
  • Account ID and open_id
• Content Publishing Data (via video.upload, video.publish APIs):
  • Video upload status and metadata
  • Publishing timestamps and results
  • API response data for troubleshooting

2.3 Automatically Collected Information

• Usage Data: How you interact with our services, features used, time spent
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access times, pages viewed, errors encountered

2.4 Cookies and Similar Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and preferences
• Analyze usage patterns and improve our services
• Provide security and prevent fraud

You can control cookies through your browser settings, though some features may not function properly if disabled.

3. How We Use Your Information

We use collected data for the following purposes:

• Service Delivery: To provide, maintain, and improve our talent management and content publishing services
• TikTok Integration: To authenticate your account and publish content on your behalf as authorized
• Communication: To send service-related notifications, updates, and respond to inquiries
• Analytics: To understand usage patterns and optimize our platform
• Security: To detect, prevent, and address fraud, abuse, and security issues
• Legal Compliance: To comply with applicable laws and regulations

4. Third-Party Services

4.1 TikTok API

4.2 Other Third-Party Services

We may use additional third-party services for:

• Cloud hosting and storage
• Analytics and monitoring
• Email communications

These providers are contractually obligated to protect your data and use it only as directed.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data in the following circumstances:

• With Your Consent: When you explicitly authorize sharing
• Service Providers: With trusted vendors who assist in service delivery (under strict confidentiality)
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with advance notice)
• Protection: To protect our rights, safety, or the rights of others

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (typically 7 years for business records)
• Resolve disputes and enforce agreements

TikTok Integration Data: We retain TikTok profile and publishing data for up to 90 days after account disconnection, unless required longer for legal purposes.

You may request deletion of your data at any time (see Section 9).

7. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (TLS/SSL) and at rest
• Regular security audits and monitoring
• Access controls and authentication
• Secure credential storage

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. International Data Transfers

OFM Group is based in Hong Kong SAR. Your information may be transferred to and processed in:

• Hong Kong SAR (our primary operations)
• Other jurisdictions where our service providers operate

We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where applicable.

9. Your Rights (GDPR and Data Protection)

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain processing activities
• Withdraw Consent: Revoke previously given consent at any time

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you become aware that a child has provided us with personal data, please contact us, and we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will:

• Notify you of material changes via email or prominent notice on our website
• Update the "Last Updated" date at the top of this policy
• Provide a 30-day notice period for significant changes

Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

For GDPR-related inquiries (EU/EEA users), you also have the right to lodge a complaint with your local data protection authority.